steffanschlein / autoauth Goto Github PK

20.0 5.0 3.0 12 KB

Firefox WebExtension to submit HTTP basic auth credentials automatically.

License: MIT License

JavaScript 66.70% HTML 33.30%

firefox-addon firefox-extension firefox-webextension firefox credentials basic-authentication

autoauth's Introduction

AutoAuth

AutoAuth is a simple Firefox Addon based on WebExtension that submits HTTP authentication credentials automatically. It does not send credentials to pages that have a custom login form.

Installation

The extension is available on Firefox' Addon portal or as a signed release on GitHub:

Features

The Addon intercepts all responses asking for HTTP authentication. If there are credentials stored, they will be sent to the server without promting the user.

Store credentials per host or port
Ignore hosts or ports on hosts so user has to enter credentials normally
View hosts for which credentials are stored

Security

The entered credentials are stored in the local storage of the addon. Thus, the passwords are not encrypted. Currently, Firefox does not offer a secure way of storing credentials for Addons.

This, however, is not seen as a security problem: The main use case of the Addon is to avoid manually submitting Firefox' auth form. Thus, it is assumed the user does not use a master password to encrypt his or her credentials.

autoauth's People

Contributors

Stargazers

Watchers

Forkers

excitoon-favorites makiisthenes staafl

autoauth's Issues

Update to Version 3.0 or newer breaks

I'm using Firefox 52.4.0 (ESR) on Debian Linux. I was previously using AuthAuth version 2.1.1, but recently updated to 3.0 and then 3.1. Both 3.0 and 3.1 do not work for me; when I go to a page with an HTTP password prompt with credentials saved by my password manager, the credentials are autofilled, but AutoAuth no longer submits them automatically. I've had to revert back to AutoAuth 2.1.1 (which works).

Disable AutoAuth on blacklisted domains

It can be useful to be able to configure manually domains or sites on witch disable AutoAuth handling.

The blackilisted domains should be specified as a list of domains or whildcards

Remember username and password by root domain

If you could make it work by root domain as well, that would be great. At my job, we have numerous internal applications which all use AD authentication. Saving my credentials for every application separately is a huge work.

AutoAuth could not work when I using local Proxy

Button Submit/Cancel acting the same way

Whatever the button click, it's the same:

if the credentials are filled, they both act like the submit button should act
if the credentials are empty, they both act like the Cancel/Ignore button should act

Since I have saved credentials on the add-on credentials page to have a default credential configuration (I don't want that to change), the credentials fields are pre-filled.
So I must empty the credentials fields before ignoring a host. Can you change that ?
If it was intended to simplify the process by having one action, perhaps you can detect the fields are unchanged when clicking on Cancel/Ignore ?

AutoAuth doesn't work on 60.7.0 ESR

AutoAuth doesn't work on 60.7.0 ESR.

The username and password entered is correct. I get message An Error has occured while logging in. Maybe your credentials were wrong.

Different AUTH credentials per directory

I find this Firefox addon very useful.
However I have different HTTP basic auth credentials for different directories on my host.
As far as I can see AutoAuth doesn't allow me to save HTTP basic authentication credentials per directory, only per host.
Is that correct?

Using same credential for one host with multiple ports

Hi,
Can you add the possibilities to have one credential for all the ports of one host ?
Like add a checkbox beside the submit button "use these credentials for all ports of this server".
That could save me hundreds of configuration.

Problem with same dns on different port with diff username and pass

If you have the same DNS (ip) and login on different ports, with different username and pass, then your plugin totally blocking access to second and above login to page.
Example:
x.x.x.x:8000 with user:bla; pass bla -> working
x.x.x.x:8001 with user:bla1; pass bla1 -> can not login apsolutlly on page, the request for login do not comes out!
x.x.x.x:8002 with user:bla2; pass bla2 -> can not login apsolutlly on page, the request for login do not comes out!
...
and so on..
If I disable plugin or close the firefox in same moment the windows with login pop-up.